188 matches found
CVE-2015-8235
Directory traversal vulnerability in Spiffy before 5.4...
DEBIAN-CVE-2015-8235
Directory traversal vulnerability in Spiffy before 5.4...
CVE-2015-8235
The CVE-2015-8235 entry concerns a directory traversal vulnerability in the Spiffy project, affecting versions before 5.4 . The connected documents consistently describe the issue as a vulnerability in Spiffy prior to 5.4, without providing details on affected platforms, exploit vectors, or the r...
CVE-2015-8235
Directory traversal vulnerability in Spiffy before 5.4...
CVE-2015-8235
Directory traversal vulnerability in Spiffy before 5.4...
WordPress Spiffy Calendar Plugin Cross-Site Scripting Vulnerability
WordPress is a suite of blogging platforms developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers running PHP and MySQL.Spiffy Calendar plugin is a plugin for managing and displaying user event and appointment information. A...
Cross site scripting
Cross site scripting XSS vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter...
CVE-2017-9420
Cross site scripting XSS vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter...
CVE-2017-9420
Cross site scripting XSS vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter...
CVE-2017-9420
Cross site scripting XSS vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attackers to inject arbitrary JavaScript via the yr parameter...
CVE-2017-9420
The CVE-2017-9420 entry concerns a Cross-Site Scripting (XSS) flaw in the WordPress Spiffy Calendar plugin before version 3.3.0, exploitable via the yr parameter to inject arbitrary JavaScript. Impact is reflected in multiple sources; remediation is to upgrade to version 3.3.0 or later. Connected...
Spiffy Calendar <= 3.2.0 - Reflected Cross-Site Scripting (XSS)
The Spiffy Calendar WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...
Code injection
The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTPPROXY environment variable, which would allow attackers to direct CGI programs which use this environment variable to use an attacker-specified HTTP proxy server also known as a "httpoxy" attack. This affects all...
CVE-2016-6286
The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTPPROXY environment variable, which would allow attackers to direct CGI programs which use this environment variable to use an attacker-specified HTTP proxy server also known as a "httpoxy" attack. This affects all...
CVE-2016-6286
The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTPPROXY environment variable, which would allow attackers to direct CGI programs which use this environment variable to use an attacker-specified HTTP proxy server also known as a "httpoxy" attack. This affects all...
CVE-2016-6286
The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTPPROXY environment variable, which would allow attackers to direct CGI programs which use this environment variable to use an attacker-specified HTTP proxy server also known as a "httpoxy" attack. This affects all...
CVE-2016-6286
The CVE-2016-6286 issue affects the CHICKEN spiffy-cgi-handlers egg, where a nonexistent Proxy header is mapped to the HTTP_PROXY environment variable. This allows CGI programs that use HTTP_PROXY to be directed to an attacker-controlled proxy (an httpoxy-style flaw). It applies to all versions p...
Spiffy目录遍历漏洞
No description provided by source...
Spiffy Directory Traversal Vulnerability
Spiffy is a free and fully customizable Gmail notification software. A directory traversal vulnerability exists in Spiffy version 5.4. This allows a remote attacker to read arbitrary files or restricted directories containing sensitive information via directory traversal characters '... /' to rea...